diff --git a/management/dns_update.py b/management/dns_update.py
index 5d2a0bc3..ccbebc89 100755
--- a/management/dns_update.py
+++ b/management/dns_update.py
@@ -511,7 +511,7 @@ zone:
 ########################################################################
 
 def dnssec_choose_algo(domain, env):
-	if domain.endswith(".email"):
+	if domain.endswith(".email") or domain.endswith(".guide"):
 		# At least at GoDaddy, this is the only algorithm supported.
 		return "RSASHA256"
 
diff --git a/setup/dns.sh b/setup/dns.sh
index 426ac633..b55e2587 100755
--- a/setup/dns.sh
+++ b/setup/dns.sh
@@ -51,6 +51,7 @@ mkdir -p "$STORAGE_ROOT/dns/dnssec";
 # Requires `RSASHA256`
 #
 #  * .email
+#  * .guide
 
 FIRST=1 #NODOC
 for algo in RSASHA1-NSEC3-SHA1 RSASHA256; do